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Abstract 

Many acceleration-sensitive, microgravity science experiments will require active vibration 
isolation from the manned orbiters on which they will be mounted. The isolation problem, 
especially in the case of a tethered payload, is a complex three-dimensional one that is best suited 
to modem-control design methods. These methods, although more powerful than their classical 
counterparts, can nonetheless go only so far in meeting the design requirements for practical 
systems. Once a tentative controller design is available, it must still be evaluated to determine 
whether or not it is fully acceptable, and to compare it with other possible design candidates. 
Realistically, such evaluation will be an inherent part of a necessarily iterative design process. In 
this paper, an approach is presented for applying complex //-analysis methods to a closed-loop 
vibration isolation system (experiment plus controller). An analysis framework is presented for 
evaluating nominal stability, nominal performance, robust stability, and robust performance of 
active microgravity isolation systems, with emphasis on the effective use of //-analysis methods. 
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A new technique is also included for deriving guarantees on allowable umbilical and payload mass 
variations, using complex //-analysis. 

Introduction 

The microgravity vibration isolation problem has received considerable attention in recent 
years. A number of materials processes and fluid physics science experiments, planned for study 
in a "weightless" space environment, have run into unacceptably high background acceleration 
levels [1]. The low-frequency disturbances of most concern are a natural accompaniment of 
space-flight, with its large, flexible, unloaded structures and random, human-induced excitations. 
The combined need, with many experiments, for human interaction and for umbilicals connecting 
orbiter with payload, has resulted in a very difficult, three-dimensional, active-isolation design 
problem. 

Recent work by the authors has produced an extended H 2 synthesis framework, along with 
an associated general design philosophy, for developing a robust microgravity vibration-isolation 
controller [2], Other approaches (e.g., classical design or // synthesis) are, of course, also 
theoretically capable of producing acceptable designs. But no approach can guarantee a 
satisfactory controller, short of an iterative design-and-analysis procedure. Analysis of any 
controller candidate is necessary to ensure that it, in fact, meets stability and performance 
requirements for a reasonable degree of model uncertainty, //-analysis methods can provide 
conservative guarantees of such acceptability [3]. // analysis also allows the engineer to assign 

a relative merit to each competing controller design. 

This paper seeks to provide an analysis framework and philosophy for evaluating a given 
isolation controller candidate, with emphasis on the effective use of //-analysis methods. 

Particular stress is placed on evaluating the nominal stability, nominal performance, robust 
stability, and robust performance of the associated closed-loop isolation system. The work builds 
on the microgravity control synthesis framework proposed by the authors in [4], 
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A Basic Isolation System 

A generic microgravity vibration isolation system is depicted below in Fig. 1 . A payload, 
such as a microgravity science experiment, is acted upon by actuators (typically noncontacting, 
e.g., Lorentz or electromagnetic) that are commanded by a control system. This control system 
uses measurements, such as payload positions and accelerations, to develop the control signals, 
typically currents or voltages. The objective of controller synthesis is to develop a stable, robust 
controller that meets or exceeds the performance requirements. A framework for developing such 
a controller, by extended H 2 synthesis, has been presented in a previous paper [4], For the 
purposes of the present work, it is assumed that a tentative controller has been synthesized and is 
in need of evaluation. 

Fig. 2. shows a transfer-function block diagram of the closed-loop system in state-space 
form. This is the basic model used for closed-loop system analysis. The plant {A,B,C,D} ( i.e ., 
payload plus umbilical plus actuator) is subject to direct and indirect disturbances; both kinds are 
included in input disturbance vector f s . The direct disturbances are those which act directly upon 
the payload; for example, these could be caused by air currents, astronaut contact, the flow of 
fluids for lubrication or cooling, or rotating machinery mounted on the experiment platform. The 
indirect disturbances act upon the payload through the umbilical. Due to the umbilical stiffness, 
any motion of the space platform wall relative to the experiment will cause such a disturbance. 

Some of the plant states x (not shown) are inaccessible; a subset y represents the ideal 
measurements, uncontaminated by sensor noise. Measurement vector z represents the actual 
measurements, which are contaminated by output sensor-noise vector . The synthesized 
controller, to be evaluated, has state-space form {A f/b ,B f/b ,C f/Bj D f/b }. E s and E n are simply 
selection matrices, and the control vector is u . 

Controller Evaluation 

Once a microgravity vibration isolation controller has been synthesized, it must be 
evaluated for acceptability and relative merit. One major design consideration is simplicity; the 
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controller’s state-space form should have no more states than necessary. For an analog 
implementation, controller complexity translates directly into hardware complexity; for a digital 
controller, the cost is largely in terms of computational power and speed. A controller which is 
robust in stability and performance but which is too complicated for employment is of no use. 
Modem control methods, especially with the augmentation accompanying frequency weighting 
and disturbance accommodation, can result in controllers that have an unnecessarily large number 
of states. The controller dimensionality can usually be reduced substantially by employing modal 
reduction and/or the balance-and-truncate technique (“Moore's method;" [5], 1981). And even if 
controller reduction is not deemed necessary, it is advisable for the sake of design simplicity. 

Another important consideration is controller stability. Although unstable controllers are 
used on occasion (provided the closed-loop system is stable) and need not be rejected out-of- 
hand, they cannot easily be bench-tested. An ideal controller designed by extended H 2 - or fi 
synthesis is guaranteed to stabilize the nominal plant; but it is not guaranteed to be open-loop 
stable, since some plants can only be stabilized by unstable controllers. Application of reduction 
techniques can also lead to controller destabilization. It is best to conduct an eigenvalue check of 
any controller candidate's "A-matrix" {i.e., its dynamic matrix) to ensure controller stability. 

Once the controller model has been checked for simplicity and stability, it is ready for 
attachment to the model of the plant. There are four crucial checks that must now be made of the 
closed loop system; v/z., nominal stability, nominal performance, robust stability, and robust 
performance [3]. The nominal analysis model (Fig. 2) is the conceptual starting point for 
conducting these checks, each of which is treated individually below. 

Nominal Stability 

An unstable closed-loop system cannot, of course, provide the isolation desired. Stability 
is the most basic system requirement for any microgravity vibration isolation system. The 
extended H 2 -synthesis method, when used for controller design, provides an inherent guarantee of 
stability for the nominal plant with full-state feedback. However, H 2 synthesis occasionally 
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produces an unstable closed-loop system due to numerical anomalies. So closed-loop system 
eigenvalues should still be checked. The same is true with a controller designed by fi synthesis. 

The well-known "separation principle" guarantees that for a perfectly known plant, a 
stable asymptotic (i.e. t Luenberger) observer will not destabilize the system. Thus, with the full- 
order observer (i.e., observing all states and pseudostates), nominal closed-loop stability is 
assured. However, models of dynamic systems are never perfect, so nominal stability is no 
guarantee of actual isolation-system stability; and the use of an umbilical for the present problem 
makes precise modeling especially difficult. Still, a check of nominal stability certainly provides a 
reasonable starting point. 

If the order of the feedback controller is reduced, the guarantee of nominal closed-loop 
stability provided by extended H 2 synthesis is lost. But simple checks of the closed-loop-system 
eigenvalues (/.£., the eigenvalues of the closed-loop system A-matrix) can readily verify (or 
contraindicate) stability, regardless of the design methodology used. For the system shown in Fig 
2, the closed-loop-system A-matrix (from input u to output z, for simplicity, and without loss of 


generality) is 

A + B(l — D f/b D) D f/b C 
r ( I-DD F/B y l C 
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represents the transfer function matrix in the feedback path from z to u. 


Nominal Performance 

A potential controller design for a microgravity vibration-isolation system must do more 
than provide stability; it must also give acceptable system performance when its model is attached 
to the nominal plant model. Orbiter motions and sensor noise must both be rejected to specified 
levels. And the necessary control signals must be small enough to prevent actuator- or amplifier 
saturation. Using the various transfer functions represented by the nominal analysis model, the 
designer can verify that the nominal controlled plant meets such design specifications. Since 
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system uncertainties ( e.g ., umbilical- or actuator model inaccuracies) will degrade actual closed- 
loop system performance, it is generally desirable to exceed the performance specifications during 
controller design, so that as large a set of off-nominal plants as possible (or desirable) will still 
meet the design specifications. Robust performance will be checked at a later stage; but it should 
be kept in mind here that a nominal performance which is only marginal will probably be 
unacceptable when model inaccuracies are taken into account. The goal, of course, is for the 
isolation system to meet the performance requirements in hardware. 

The uncontrolled plant for the microgravity vibration-isolation problem has a strictly 
proper transfer-fiinction matrix (i.e., D = O, the zero matrix). Accordingly, the closed-loop 
transfer functions from process-noise inputs £$ to measurements z are 

A + BD f/b C BC f/b I 

&fjbC A f/b O 

EJC O O 

And from sensor noise inputs j ^ to measurements z, the closed-loop transfer functions are 

A + B D f , b C BC f/b BD f/b 

Bf/bC ^f/b B F /b 

C O I 

The closed-loop system must achieve acceptable isolation, but it must do so without unacceptable 
sensitivity to sensor noise. These two tasks involve an inherent trade-off. High loop gains are 
necessary to reject input disturbances at a given frequency. These correspond to small 
transmissibility gains, to small magnitudes of the complementary sensitivity-function matrix T. 
On the other hand, low loop gains are necessary to reject sensor noise. These correspond to small 
magnitudes of the sensitivity-function matrix S. Since the sum of T and S is the identity matrix I 
[6], the designer cannot achieve arbitrarily low sensitivity to noise in the same frequency band 
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where good disturbance rejection is to be accomplished. This unavoidable trade-ofFcan be 
measured by use of the above two transfer-function matrices. 

The system must also employ a control signal that does not become excessive for realistic 
disturbance levels. If amplifiers or actuators are allowed to saturate, the resulting nonlinearities 
will greatly complicate both the synthesis and the analysis problems. The following transfer- 
function matrix provides a measure of this aspect of nominal system performance. 



A + BD f/b C BC f/b E s 

E f/b C A F/B o 

Df/bC C f/b O 


(2c) 


Simple Form for Nominal H 2 Controller 

For a controller designed by extended H 2 synthesis [4], the controller transfer-function 

matrix — — F/rg has a particularly convenient form. First, define n\— dim(x), the number of 
_ Cf/B D F tB _ 

states in the plant model; and let the disturbance-accommodation pseudostate vector be 
£ = [£ r ,4^] r , with and corresponding to input- and output disturbances, respectively. 

Assume the use of an asymptotic observer for state reconstruction. When all states and 
pseudostates are reconstructed in the observer, the full observer-synthesis model is used (Fig. 3 a). 
In this case, 

A FfB Bf'A J 'A-'B'K-'L'C ’L 
C FfB D f/b J [ o 

where K is the optimal feedback gain matrix, and L is the observer gain matrix. The pre- 
superscripts n 1" reflect the appropriate augmentation. 
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The frequency-weighting pseudostates need not be reconstructed in the observer, since 
they can be produced from the state observations and control signals, by simple filtering. One can 
then (more typically) use an observer-synthesis model of reduced order (Fig. 3b), in which case 


^ FIB 

&F/B 


~ 'A-'B'K-’L/C 

X 

c 

FIB 

®FtB _ 


- l K 

O 


(4a) 


where 2 L S 



, for 



with L x consisting of the first n rows of 2 L. 


(4b, c) 


The pre-superscript "2" indicates that the frequency-weighting pseudostates were omitted in the 
augmented plant model used for determining the observer gains [4], Eqs. (3) and (4) can be used 
with Eqs. (1) and (2) to evaluate system nominal stability and -performance with relative ease. 


Robust Stability 

To be practical, a vibration-isolation system must be stable not only for the nominal plant 
but for a range of off-nominal plants as well. For the microgravity isolation problem, the payload 
mass will in most cases be known quite accurately. But fluid motion (e.g., for cooling or in 
studies of liquid bridges, surface-tension driven convection, or encapsulated crystal growth) can 
cause actual or apparent mass/inertia variations. And umbilical and actuator nonlinearities will 
typically cause the respective models to be quite inaccurate. A controller design must take into 
account such effects, so that system stability can be ensured for at least the anticipated range of 
model uncertainties. A closed-loop-system of this character is said to have robust stability. 

In classical control theoiy, the gain margin (GM) and phase margin (PM) of a single-input- 
single-output (SISO) system are the familiar measures of stability robustness. They measure, 
respectively, the amount of gain or phase that can be inserted into the feedback loop of a transfer- 
function block diagram without leading to system instability. (This may be conceptualized as the 
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turning of a "gain knob" or "phase knob," respectively, until instability is encountered.) 
Accordingly, they provide the analyst with separate measures of allowable uncertainty in loop gain 
or phase. 

If the loop gain and phase are allowed to vary simultaneously, this uncertainty can be 
represented correspondingly by a complex gain e a * J ^ = re Jfi . Let A(s) be a complex "ball" 
representing all possible complex gains of some magnitude r, and let A i(s) be the transfer function 
of the (stable closed-loop) system "seen" by these gains. (Refer to Fig. 4.) The magnitude of the 

scalar product A{jco)^A{jcd) must be less than one to guarantee that the uncertainty does not 
destabilize the system. Consequently, the magnitude of the inverse o£M(jco) (i.e., |A/ (y^)|) 

provides a measure of the magnitude of complex uncertainty allowable in the loop, as a function 
of frequency co. The minimum of the plot of |A^(yW)j provides a guarantee of allowable 

uncertainty size for all frequencies. 

For multiple-input-multiple-output (MIMO) systems, a robustness analysis method veiy 

similar to the zl-complex-gain method described above can be used. In this analysis, A 4(s) is a 

transfer-function matrix and zl(.s) is a transfer-function matrix of complex gains representing 

uncertainty in the system. The maximum singular value of the matrix product A{jco)M(JaS) must 

be less than one to ensure a stable system. Consequently, the inverse of the maximum singular 
value of M{jco) (/.£., ~cr i [A/(y’<u)]) provides a measure (induced 2-norm) of the complex 

uncertainty allowable in the loop as a function of frequency ox The minimum of the plot of 
o ~ 1 [Af(jo))] provides a guarantee of the allowable uncertainty size for all co. 

One problem with the singular-value method is that it may model uncertainties in the 
system which are not physically meaningful, since it allows any input (to the zl-block) to be 
coupled to any .4-block output. The structured singular value fJ. provides an alternative measure 
of stability robustness which permits the analyst to remove unrealistic couplings. This is 
accomplished by prescribing a structure for the complex gain matrix A(s). To measure system 
stability robustness using // analysis, the engineer first models system uncertainties as a complex 
gain matrix A(s ) with a block diagonal structure, appropriately located in a flow path of a transfer- 
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function-matrix block diagram. This structured-uncertainty matrix is composed of smaller 
complex uncertainty blocks (/4,-blocks) along its main diagonal. To permit p analysis it is required 
simply that the resulting system, with /4-block inserted, be capable of arrangement as shown in 
Fig. 4. Once this has been done, the structured singular value p of A 4{jcd) can be found. (In 
actuality, p can be determined exactly only if the number of ^-blocks is three or fewer, for a 
larger number of blocks, upper and lower bounds must be employed [3].) p-'lMQco)] provides a 
measure of the largest magnitude (induced 2-norm) that the ^-blocks can all possess 
simultaneously without any combination of the A t -blocks leading to system instability. The 
structured singular value p\K4(jco)], used with a structured uncertainty, is analogous to the 
maximum singular value o[A/(y< 2 >)] which was used in the unstructured case. 

Example: Robust Stability Analysis for Actuator Uncertainties 

To illustrate, consider a robust stability analysis for a microgravity isolation system with 
noncontacting magnetic actuators. Two types of actuators are under consideration/development, 
magnetic bearings and Lorentz actuators [7]. Each type is likely to experience gain variation as a 
function of payload position in the rattlespace. Position-dependent cross-coupling is likely as 
well, between each actuator's nominal line of force and the associated orthogonal axes. Finally, 
anomalous phase lags can be expected due to unmodeled physical phenomena {e g - , eddy currents 
and hysteresis). Such actuator uncertainties can be modeled by use of a multiplicative input A- 
block, inserted into the nominal analysis model (closed-loop portion) as shown in Fig. 5. The A- 
block has a direct physical correspondence to phase-plus-gain uncertainties in the controller 
output(s) or actuator(s). The uncertainty can be either unstructured or structured. Assuming that 
each actuator has only one line of action. If a control input to one actuator affects only the output 
of that actuator, a structured uncertainty model will give more realistic (/'-£., less conservative) 
results. If there is appreciable cross-coupling from one actuator input to the output of another 
actuator ( e.g ., via the cocking of the payload) then the unstructured form is more appropriate. 
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Consider the unstructured case first. In this case, A is a full complex matrix, with 
uncertainties between all of its inputs and outputs. Re-express the system in the form shown in 
Fig. 6, where M is the transfer-function matrix "seen” by A. For this example (/.e., with a 
multiplicative input Ablock), 

M = G 2 G,{I -Gfi,)"' . (5) 

IF is a scalar weighting function, used to normalize the Ablock so that its maximum singular 

value is less than one. In order to have a stable system, it is necessary that the product 
A(s)W(s)M(s) have a maximum singular value a less than one. Accordingly, a- l [WM(jco)} 

gives the maximum allowable "size" of A as a function of co. Specifically, if the maximum 
singular value of A is less than ar- *\WM{jco)\ there is no uncertainty represented by A that can 

destabilize a stable system. ( E.g., for a SISO system one could choose W to reflect the minimum 
acceptable phase- or gain variation from controller output to plant input, as a function of 
frequency [2]. With this normalization of A, if the plot of cr'[W M(jco)] is below unity for all co 

the nominal system is guaranteed to have the required stability margin.) 

Next consider a structured-uncertainty case, where A has a block-diagonal form. For a 

[A, O ] 

system with two control inputs there would be two zl/-blocks: A— ^ ^ . Physically this 

means that uncertainties are considered to exist only "in-channel" between input(s) and output(s) 
of A Again, re-express the system in the form shown in Fig. 6; K4 is defined as before. W in this 
case is a diagonal weighting matrix , with one scalar weighting function per channel of input to A. 
This weighting matrix is used to normalize each .dy-block so that its maximum singular value 
a(A .) is less than one. In order to have a stable system it is necessary that the product 

A(s)fV(s)M(s) have maximum singular value a less than one, as before. Accordingly, 
fjr 1 [fFA/(y<y)] gives the maximum allowable "size" of the uncertainty blocks Aj, as a function of 
co. Specifically, if the maximum singular value of each /iy-block is less than //“ 1 \W A/(y< 2 >)] there 
is no uncertainty represented by A that can destabilize a stable system. (E.g. t for a system with 
two control inputs one could choose W to reflect the minimum acceptable in-channel phase- or 
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gain variation from each controller output to the associated plant input, as a function of frequency 
[2]. With this normalization of A t if the plot of jr 1 \Wb4{J(D)\ lies below unity for all co the 

nominal system is guaranteed to have the required stability margins.) Note that since the 

uncertainty block(s) Aj can represent complex gains in any direction in the gain plane, even those 

directions not corresponding to realistic variations, //-analysis results are conservative in nature. 

In the case of an unstructured zl-block the plot of cr~ l ( Af ) can be used to calculate MIMO 

gain margin (GM) and -phase margin (PM) ([3], pp. 47-56) at the plant input. In the structured- 
uncertainty case either cr _/ ( M) or, less conservatively, /r 7 ( M) can be used for this purpose. See 

the Appendix for details. 

Other Stability-Robustness Checks for the Microgravity Isolation Problem 

As shown above, multiplicative-input ^-blocks are useful in finding guarantees of 
allowable variation for magnetic- or Lorentz actuators, ^-blocks can be placed elsewhere in the 
system block diagram to provide other useful stability-robustness guarantees, in similar fashion. 
The controller inputs for the microgravity isolation problem typically come from relative-position 
sensors and accelerometers. Each sensor will filter its input in a manner only approximated by its 
transfer-function model. The analyst can determine guarantees of allowable sensor variations with 
the use of multiplicative-output .^-blocks (Fig. 7a). As before, a MIMO GM and PM can be 
derived. In addition to the above variations, there will be higher system modes for which the 
payload- and umbilical models do not account. An "additive uncertainty" zl-block can be placed 
in a forward direction around the plant (Fig. 7b) to find an measure of the modal uncertainties 
allowable. One can also use a feedback uncertainty-block (Fig. 7c) to model uncertainties in 
payload mass, or in umbilical stiffness or damping, as will be shown later. 

Robust Performance 

It is necessary also that the closed-loop system performance not degrade unacceptably if 
the isolation system model is inaccurate or if the system changes over time. For example. 
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umbilical model uncertainties must not reduce microgravity isolation below acceptable levels. The 
level of performance robustness can be measured by using n analysis, in a manner similar to that 
employed for stability-robustness analysis. By posing the closed-loop frequency-domain 
specifications in the form of a d-block with an appropriately selected weighting matrix ( ApjzsxA 
Wpj, respectively), and at the same time using stability 4-blocks {Asd as described previously, the 
designer can determine how much complex uncertainty is allowable at various places in the 
closed-loop system, without exceeding the performance specifications or causing system 
instability ([3], pp. 68-73). Typically the non-zero elements of Wpfare the reciprocals of the 
appropriate closed-loop transfer functions. Again, the results are conservative. 

Figs. 8a and b give examples of robust-performance analysis models which are useful for 
the microgravity isolation problem. The structured singular value plot for the multiplicative input 
(or -output) case can be used to determine a M3MO gain variation (GV) or -phase variation (PV). 
These are conservative measures of the gain- or phase variation allowable in each channel 
(entirely analogous to MIMO PM and GM) without violating performance specifications or losing 
stability guarantees. (See the Appendix for details.) These measures are found for a realistic 1-D 
microgravity isolation problem in reference [2]. 

Real Parametric Uncertainty Guarantees 

The multiplicative-input-, multiplicative-output-, and additive-uncertainty blocks used in 
the above checks are inadequate by themselves to verify system stability- or performance 
robustness for the microgravity vibration isolation problem. In particular, these checks cannot 
verify system robustness to uncertainties in umbilical properties or in payload mass/inertia. These 
kinds of uncertainties are referred to as "real parametric uncertainties." Robustness in the face of 
real parametric uncertainties is of particular concern for the microgravity vibration isolation 
problem, since umbilicals are quite difficult to model accurately. Some possible approaches to 
this problem are surveyed below, along with a new approach using complex feedback uncertainty. 
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Real-fj. 


One possible approach to determining real-parametric-uncertainty guarantees is the use of 
real-// (ji R ). To use n R the problem is first expressed in the form of Fig. 6, where the diagonal 
elements of the ^4-block are restricted to being real and uncorrelated. (The initial procedure for 
producing this form is generally somewhat involved, but straightforward. See [8].) The 
interpretation of /i R is analogous to that of complex-//, with the exception that now only real gains 
are considered. Unfortunately, exact calculations of fi R are very computationally intensive; 
accordingly, its practical use is severely limited, to about eight or nine parameters [9], For some 
problems, though, this is an acceptable limitation. If the 3-D microgravity problem has umbilicals 
that can be modeled jointly by one 3-D spring-and -damper system, and a payload that is isolated 
by one 3-D magnetic actuator, the real-// problem can have one mass, three uncorrelated inertias, 
three uncorrelated stiffnesses, and three uncorrelated dampings. If the uncertainties in damping 
can be considered of negligible effect (as indicated by certain studies of the 1-D problem [2]), then 
real-// could be a practical analysis option. Note, however, that real-// cannot be used for 
performance-robustness analysis, since only real uncertainties can be represented in the 
corresponding <d-block. 

Mixed- fd 

A second approach to obtaining real-parametric-uncertainty guarantees is to treat the 
problem using mixed-// (//J, where both real and complex uncertainties (including repeated 
blocks) are allowed in the zl-block substructure [10], In general, is more conservative than /j r , 

but the inclusion of complex gains permits performance-robustness checks while still considering 
real parametric uncertainties. Again, the starting point is shown in Fig. 6. As with real-//, exact 
mixed-// calculation appears to be fundamentally limited to very restricted cases. However, there 
have been promising advances in finding useful upper and lower bounds on //^for many 

engineering problems of practical size (with as many as 100 real parameters) [10], 
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Complex- fj. 

A third approach would be to set up the problem as with real-//, but to compute 
complex-// (// ) instead. This method can be used for both stability- and performance-robustness 
checks. However, // is more conservative than p K or p R , and there is still no exact computational 

method for more than three ^-blocks. Again, one must generally settle for upper and lower 
bounds. 

Complex- p with Feedback Uncertainty 

Alternatively, complex-// can be used in a fundamentally different way for conducting real- 
parametric-uncertainty analysis. The previous three methods all require the use of separate 
^/-blocks for each parameter under consideration, so that the respective parametric uncertainties 
are considered in mutual isolation. For the 1-D microgravity isolation problem, this means that 
Sk, Sc, and dm must each have its own ^d/-block in the overall uncertainty-block structure. 
However, for this problem the uncontrolled plant has a characteristic equation (viz., ms 2 +cs + k ) 
that permits exploitation for real-parametric-uncertainty analysis. If the plant is rearranged 
appropriately for the insertion of a complex feedback .4-block, it is possible to use the particular 
structure of the associated complex-// to determine combinations of payload mass, umbilical 
stiffness, and umbilical damping for which robust stability can be assured. (As with the preceding 
methods, the results are conservative.) 

Consider the block diagram shown in Fig. 9a, where Sm, Sc, and Sk represent real 
variations in payload mass, umbilical damping, and umbilical stiffness, respectively. This block 

diagram reduces to the equivalent block diagram shown in Fig. 9b. If a complex .4-block, "A F/B ," 

is placed in a negative feedback path around — y— (/•«-, in place of the feedback transfer 

ms +cs+k 

function in Fig. 9a), then real parametric uncertainty bounds on k, c, and m can be obtained from 
the structured singular value plot of the system "seen" by A F/B . The method is as follows, for a 
one-dimensional (1-D) isolation problem. 
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First, arrange the closed-loop system such that it contains a transfer function block having 

the structure For a niicrogravity isolation system such a block diagram is 

ms 2 +cs + k 

shown in Fig. 10. To evaluate the stability robustness of this system, one can look at a rearranged 
(and abbreviated) block diagram, shown in Fig. 1 1, where a feedback uncertainty block A F/B has 
been inserted into the analysis model. This feedback stability robustness model can be reduced 
readily to the form of Fig. 4, with the plant "seen” by A F/B designated M F/B . For a given value of 
co (say, coj) A F/B {co ; ) can be conceptualized as a ball in the complex gain plane, of radius r^ico/), 
with radial unit direction vector (variable) g. The value r k (co } ) = 1 [ M F/B ( jco ) ] gives the 

maximum allowable size (2-norm) of complex uncertainty A f/b (<Oj). In particular, if r A (cOj) is 
smaller than r k (coj) there exists no complex unit direction vector g at which an uncertainty (gain) 

represented in A F/B {coj) will drive a stable system unstable. However, a A f/b (cOj) of size 

jr (^ ) = r k (cOj ) will drive a system pole onto the jco-axis for some complex unit direction g = g> 

The result will be system instability, for the complex uncertainty r k {co , ) & . (This complex 
uncertainty might not, of course, actually correspond to a physically possible variation. 
Accordingly, the term "allowable" may be true only in a conservative sense.) 

Note that the above discussion is for a particular (arbitrary) frequency, co,. When the 
plotted magnitude of A F/B (co) remains below the curve r k {a>) for all values of co, this means that 
there is no complex uncertainty contained in the uncertainty ball that can drive the system unstable 
at any frequency co. 

Let Ak represent a complex ball of potential variations in stiffness k. Then the plot r k (<o) 
displays the "allowable" (in the sense just described) size of Ak, as a function of co y given no 
uncertainty in c or m. In other words, at any frequency co, r ,/co ) indicates how large Ak can be 
without placing a system pole on the jco ~ axis at s — jco. (Since only real variations in stiffness are 
physically possible, the plot of c^/co) provides a conservative guarantee of permissible stiffness 
variations as a function of frequency co. In this sense, it provides guarantees but not limits on 
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permissible stiffness variations.) If one defines Ac, r m , 
be obtained: 


r k (co) = n l { M f/b | ) 

V s=jco ) 

*e(^) ~ M 1 ( $M FIB | ) — 

V s=ja> J 

= V-' { | } = 

V s=ja> J 


r t (e>) 

CO 

rA<o) 

CO CO 2 


and Am analogously, the following can 

(6a) 

(6b) 

(6c) 


The minimum of each curve (call these minima p^ and p m , respectively) tightly bounds the 

amount of complex variation ’’allowable” (again, in the conservative sense described above) in Ak, 
Ac, and Am, respectively, without any other feedback variations. If, for example, the size of Ak 
equals the minimum p ^ instability will occur at some frequency co k for the complex variation Ak of 
that magnitude, in some complex direction (call the unit direction vector g k ). Analogous 
situations exist in the cases of Ac and Am. p^ p^, and p m thus provide the designer with 
conservative guarantees of "allowable" real parametric plant uncertainties 5k, 5c, and 5m, taken 
one at a time. 

It is possible also to use the structured singular value information to obtain guarantees on 
combinations of real parametric uncertainties. Let Cb r be defined as an "acceptable region in the 

real parameter space made up of points with coordinates (5k, 5c, 5m). The origin (0,0,0) 
corresponds to a system with nominal plant parameters k = k^, c = and m = m^ . (Refer 
to Fig. 12a.) Let r r be the boundary between 0U r and the "unacceptable region," V r . Used in this 
way, "acceptable" and "unacceptable" refer to system behavior, in terms of stability (for the 
present consideration) or performance. For a given frequency co, there may be some combinations 
(5k, 5c, 5m) for which the control results in an acceptable (e.g., stable) behavior; such points 
would be in Cty. Other values (5k, 5c, 5m) which yield an unacceptable behavior at that 

frequency would be in U r . The boundary r r is found, in theory, by varying s fromyfl to joo, and 
plotting each point (5k, 5c, 5m) that leads to a closed-loop system pole on the_p»-axis. Only 
purely imaginary values of s are used. 
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The designer would like to bound Sk> 5c t and 5m such that he remains in CL r . One 
possible approach would be to use a "brute-force” (J.e., point-by-point) method. Such an 
approach, while having the advantage of remaining entirely inside a real parameter space, can 
only make guarantees about the specific sample points considered, p analysis, in constrast, 
considers all values in a region of a complex gain plane, so that the /d-block is a "ball" that leads 
to conservative guarantees for complex uncertainties less than some "size." This information, 
although conservative, is still of great value; and since it is much easier to obtain, it has been used 
in this study. These complex uncertainties can be used to obtain guarantees on combinations of 
real parametric uncertainties, as follows. 

Consider Fig. 12b. The region £2{co,) consists of all points in complex gain space 
corresponding to values of uncertainty gain g (J.e., of the structured singular value of A F/B ) which 

place a system pole on the jo >- axis at frequency co,. ( g is underlined to indicate that it is a vector 

quantity with real and imaginary components.) The "acceptable region" Cb (co,) is a ball in the 
gain space, centered at g=0, with radius r k (co,) = p'\M F/B (jco, )3» such that J ust touches the 

nearest point of 17. A separate figure would exist, theoretically, for each value of co. 

An uncertainty block A F/B whose magnitude (i.e., radius in the gain-plane) is less than 
r k (coj) is guaranteed not to represent any complex gains which could place a pole on they'( 2 >-axis at 
c Oj . The maximum allowable size of A F/B (i.e., of r k (co)) varies with frequency; define p k as the 

size of the largest uncertainty ball A Fm (or alternatively. Ah') that will not lead to instability at any 
frequency. Let co k be the limiting frequency. p c and p m (with w c and co m , respectively) provide 

analogous conceptual pictures Referring to Fig. 12b again, let ^(co,) represent the vector of A F/B 
with complex gain g = g , componentiated in terms of its real and imaginary parts. g k (co,) is the 

limiting value of g(co,) at frequency co,. Let 3^ and i' be unit vectors in the real and imaginary 
g -plane directions, respectively; let g k (&t) be the unit vector in the direction of r^co,); and let 
P,(coj) and B^co,) be the scalar components of g k (a,), such that 

r k (co ] ) =^r k (co, )[/? 7 (co, )o g {co, )v g ] y r k (co , ) = r k (cOj )g k {co , ), (7a,b) 

and ff(co J ) + pl< < co 1 ) = l (7c) 
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(8a,b) 


Analogous vectors and equations exist for each frequency co. 

If, for all co <, /, {Sk - co 7 dmf < p 7 (<y)r/ (co) and (co5c) 2 < ft 2 ( co)r 7 (co) 

where 5k, 5c , and 5m are real variations in k , c, and m from the nominal, then one can be assured 
that no instability will occur for those values of co. Since p k is the rrun (&>)], one can replace 

r k (co) with p k in (8a,b) and the assertion will still hold. Finally, since the limiting case of p } and P 2 
(i.e., corresponding to p ^ is at a point of tangency to £2(co^, any other values Yj and Yi ma Y be 
substituted for pj and p 2 , provided that y\ + y] </, without exceeding the boundaries of &(<o k ). 

Then the following assertion will hold (Assertion #1): 

If, for all co </, (<5t - co 7 5m) < y] p\ and ( coSc ) 2 < y]p\, 
where y* t + y^ <1, 

then no instability will occur for those values of co. 

Defining p 3 (co) and p 4 (co) in an analogous way to pj(co) and P 2 (co), where s 2 M F/B now replaces 
Af in Fig. 4 (refer also to Eq. 6c), one can also arrive at the following: 

If, for all co > /, < 0 2 3( co )Pm and ( < %>) < 0 2 ( ( O) )Pm> (10a,b) 

then no instability will occur for those values of co. 

Finally, one can replace p 3 (co) and p 4 (co) with variables y 3 and y 4 , as before, provided / 3 + / 4 <l. 
This results in the following. Assertion # 2: 

If, for all co > 1, ^Sm - < y\ p 7 m and < YiPi* 0 la > b ) 

where y* 3 + y* 4 < 1 , then no instability will occur for those values of co. (11c) 

From Assertions #1 and #2 the following condition can be obtained: 


(9a,b) 

(9c) 
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Given any y h y^ and TV satisfying^ 2 + y* < 1 and yj + yj < 1 , and with p , p c , and 
as previously defined, the following stability condition holds: 


N 


< mm< 


A 

ka-M 

Ijsa-IHJ 


and |<5/w| <p„ f 
and |&j<min- 


Pc 
KPt 
{ Y<P m ) 


system stability (Assertion #3) 


By using Assertion #3, one can obtain guarantees of real variations in umbilical stiffness, umbilical 
damping, and payload mass that can occur simultaneously without violating stability 
specifications. Upon obtaining p ky p^ and p^from the appropriate structured-singular- value plots, 
the analyst chooses y 2 and y 4 based on the percent error expected in c. Next, he chooses an 

expected percent error in m (such that \Sm\ < p m ). Then y } and y 3 are found from the equations 
yf + y* - / and n + rl = 1 ; and finally guarantees are determined on allowable 5k. This provides 

the analyst with a guarantee on the allowable maximum magnitude of stiffness variation 5k, as a 
function of the assumed maximum magnitudes of simultaneous variations in umbilical damping 5c 
and payload mass 5m. For any combination of real parametric variations remaining within this 
real parameter space, the analyst can guarantee that the system will be stable. 

This analysis procedure depends on the ability to arrange the microgravity isolation-system 
model and complex-feedback-uncertainty block(s) in the appropriate form. Application to the 
1-D case is found in reference [2]. The method was found to give useful results for stability- 
robustness analysis, but the performance-robustness results were excessively conservative. For 
more complicated geometries the application will be more difficult, and may not always be 
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possible. Nonetheless, the use of feedback uncertainty zl~block(s) can provide the engineer with 
at least a relative measure of closed-loop-system robustness to umbilical- and payload parametric 
variations. 

Concluding Remarks 

Analysis is a vital part of controller design for a microgravity vibration-isolation problem. 
Due to the many competing requirements for a microgravity isolation system, the design of an 
effective controller involves a studied, iterative process of synthesis and analysis. Each 
synthesized controller must be subjected to a series of analytical checks, to verify that it will 
perform satisfactorily under even the most pessimistic combination of possible model inaccuracies. 

Most of the types of uncertainty that are of concern with a microgravity isolation system 
can be modeled by complex uncertainty-blocks, appropriately placed in the nominal system’s 
transfer-function block diagram. This includes uncertainties in amplifier, actuator, and sensor 
models, as well as unmodeled higher modes of the system. The powerful methods of complex-// 
analysis permit the analyst to obtain guarantees on the amount of uncertainty of each type that can 
be tolerated without compromising stability or violating performance constraints. 

Guarantees on allowable variations in real system parameters (such as umbilical stiffness 
and damping, and payload mass/inertia) may be found by similar, if more sophisticated, 
techniques. These techniques generally require mutual isolation of selected parameter 
uncertainties in the uncertainty-block structure. The analyst then obtains the desired guarantees 
by using either real-, mixed-, or complex-// methods, in increasing order of conservatism. 
Alternatively, the form of the microgravity isolation problem permits an approach involving the 
use of complex-// with a feedback uncertainty-block having a much simplified structure. The 
particular relationships between the parametric uncertainties, which are represented intermingled 
in the feedback uncertainty-block, have been exploited to determine allowable combinations of 
real-parameter variations. 
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Appendix 

The familiar phase margin (PM) and gain margin (GM) can be generalized to apply to 
multiplicative input (or output) uncertainties for MIMO systems. Dailey’s discussion [3] is 
adapted below. Let the ith control-input channel have a multiplicative phase rotation (j.e. y 
l + = &°i), and let the various phase rotations be independent of each other. The input MIMO 

PM is defined as the largest real (unique) interval Int — [-6, 0\ such that for all simultaneous 
independent phase rotations 0 i &Int ( i=J , .... n) the system remains stable. The output MIMO 
PM is defined similarly. An input MIMO GM is defined as a real (non-unique) interval Int = [G L , 
G {J ] such that for all simultaneous independent gain variations G t satisfying 1 + G i e Int (/ = 1, 
ri) the system remains stable. The output MIMO GM is similarly defined. 
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Let Sj and Tj be the sensitivity and complementary sensitivity transfer matrices, 
respectively, at the plant input. Then, in terms of the complementary sensitivity function T h a 
guaranteed lower bound for the MEMO PM is given by 


MIMO PM 3 [-0 t +0] 


(A- la) 

where 0-2 sin- 7 J 

(A- 1 b) 

for = inf a-‘[T,(Ja>)] 

oxLR 

(A-lc) 

A valid MIMO GM is given by 



MIMO GM =r/-r / + r 

L 9909 % 9 990 91 

] 

(A-2) 

In terms of the sensitivity function Sj , 



MIMO PM id [-#, + #] 

(A-3a) 

where 6= 2 sirr / 

(A-3b) 

for = inf o-'[S, (-/<*>)], 

ax?_R 

(A-3c) 

and MIMO GM = 

1 1 

(A-4) 


If instead of <r the structured singular value // is used in Eqs. (A-lc) and (A-3c) above, the 
lower bounds on the stability margins will be improved. For the analogous output stability margin 
guarantees, one merely substitutes the output sensitivity and complementary sensitivity transfer 
matrices S 2 and respectively, into the appropriate equations given above. 

Application to cases where performance specifications are included as zl-blocks can be 
made readily using structured singular values. In these cases, however, the terms "MIMO phase 
variation (PV)" and "MEMO gain variation (GV)'* are more appropriate, for obvious reasons. 
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Figure 2. — Nominal analysis model. 
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Figure 3a. — Full observer-synthesis model. 
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Figure 4. — Basic uncertainty analysis model. 
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Figure 5. — Robust stability analysis model: multiplicative 
input uncertainty. 



Figure 6.-— Weighted /^-analysis model. 
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Figure 7a. — Robust stability analysis model: multiplicative output 
uncertainty. 



Figure 7b. — Robust stability analysis model: additive 
plant uncertainty. 



Figure 7c. — Robust stability analysis model: feedback 
uncertainty. 
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Figure 8a. — Robust performance analysis model: multiplicative input 
uncertainty. 
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Figure 9b. — Reduced feedback variation block diagram. 
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Figure 10. — Closed-loop system block diagram, frequency domain. 
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Figure 1 1 . — Block diagram for feedback stability robustness analysis. 
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